I suppose that's possible, but it's the same libpcap code. The only thing I changed out was Ntop.
For the use we actually contemplate, Ntop won't have to deal with its own machine using DHCP. Nevertheless, it's a concern because I don't know what is causing this to happen. Does it have something to do with how the DHCP client accessses the interface? If it is, then other programs we will be running can cause the same difficulties. Setting it into promiscuous mode and using the packet and raw sockets are all things that other programs will be doing. I've been running this Ntop on another Fedora 9 system that has static IPs for two days now. So far, no problems. --- On Thu, 8/21/08, Gary Gatten <[EMAIL PROTECTED]> wrote: > From: Gary Gatten <[EMAIL PROTECTED]> > Subject: RE: [Ntop] Ntop 3.3.7 Crashes On DHCP Lease Update > To: [email protected], [EMAIL PROTECTED] > Date: Thursday, August 21, 2008, 4:51 PM > PS: Could it be with the libpcap code - since it's > actually binding to > the NIC? > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of > Gary Gatten > Sent: Thursday, August 21, 2008 6:48 PM > To: [email protected]; [EMAIL PROTECTED] > Subject: Re: [Ntop] Ntop 3.3.7 Crashes On DHCP Lease Update > > Ah, maybe give it a fixed IP address :) > > Sorry - not much help. I can see where it could possibly > cause problems > even if it gets the same IP every time. I'm sure > someone (Luca, Burton, > et all) could fix it - but it's beyond what I can do. > > If your machine NEEDS a DHCP addy with a ~ 24hr lease, > maybe add a > second NIC to your system with no ip just for ntop? Again, > doesn't > "fix" the code but does resolve the problem. > > G > > > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of > Craig Orsinger > Sent: Thursday, August 21, 2008 6:05 PM > To: [email protected] > Subject: [Ntop] Ntop 3.3.7 Crashes On DHCP Lease Update > > As I mentioned in a previous e-mail to this list, I've > built Ntop 3.3.7 > on Fedora 9. This was successful, except for this problem. > > The computer I'm testing this on uses DHCP to obtain > its IP address. > Every time this happens, this new version of Ntop crashes. > It's happened > three times now. Each time, this is the output as shown in > the syslog: > > Aug 19 01:48:15 ge40403 dhclient: DHCPREQUEST on eth0 to > X.X.X.65 port > 67 > Aug 19 01:48:15 ge40403 kernel: ntop[1255]: segfault at 38 > ip 00204d63 > sp b1e665c4 error 6 in libntop-3.3.7.so[1bf000+65000] > Aug 19 01:48:15 ge40403 dhclient: DHCPACK from X.X.X.65 > Aug 19 01:48:15 ge40403 kernel: device eth0 left > promiscuous mode > Aug 19 01:48:15 ge40403 dhclient: bound to X.X.X.70 -- > renewal in 41094 > seconds. > > I've removed the IP network address for privacy > reasons, but those X's > represent the same three numbers each time. > > This doesn't happen when I run Ntop version 3.3 on the > same system. I'm > running the new Ntop now with the --disable-decoders flag > set to see if > the problem is in the decoders. > > Has anyone else encountered this problem? If so, is there a > fix? > > > > > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > <font size="1"> > <div style='border:none;border-bottom:double > windowtext > 2.25pt;padding:0in 0in 1.0pt 0in'> > </div> > "This email is intended to be reviewed by only the > intended recipient > and may contain information that is privileged and/or > confidential. > If you are not the intended recipient, you are hereby > notified that > any review, use, dissemination, disclosure or copying of > this email > and its attachments, if any, is strictly prohibited. If > you have > received this email in error, please immediately notify > the sender by > return email and delete this email from your system." > </font> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > <font size="1"> > <div style='border:none;border-bottom:double > windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> > </div> > "This email is intended to be reviewed by only the > intended recipient > and may contain information that is privileged and/or > confidential. > If you are not the intended recipient, you are hereby > notified that > any review, use, dissemination, disclosure or copying of > this email > and its attachments, if any, is strictly prohibited. If > you have > received this email in error, please immediately notify > the sender by > return email and delete this email from your system." > </font> _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
